Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32322d3232203d3e203632343638.roa
File:                     3130332e35332e3132342e302f32322d3232203d3e203632343638.roa (raw, json)
Hash identifier:          +S6johYSC7+hPU1JnOq6hY+Zhl0lAStIlYXonk5DJsw=
Subject key identifier:   50:1E:BE:BA:0E:72:FB:38:C2:D9:BD:AC:6F:31:B3:9A:D7:6A:C6:CA
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       0E65F62CEC07E3359CE84C125E7582B128FFB838
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32322d3232203d3e203632343638.roa
Signing time:             Mon 15 Jun 2026 06:18:15 +0000
ROA not before:           Mon 15 Jun 2026 06:13:15 +0000
ROA not after:            Mon 14 Jun 2027 06:18:15 +0000
asID:                     62468
IP address blocks:        103.53.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 00:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:65:f6:2c:ec:07:e3:35:9c:e8:4c:12:5e:75:82:b1:28:ff:b8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Jun 15 06:13:15 2026 GMT
            Not After : Jun 14 06:18:15 2027 GMT
        Subject: CN=501EBEBA0E72FB38C2D9BDAC6F31B39AD76AC6CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:c0:98:1c:43:4e:e9:7d:d3:bc:20:ab:68:
                    7a:b8:e2:99:e4:63:bc:64:d3:c1:4a:eb:6d:17:8c:
                    50:85:2b:5a:da:c3:18:58:7c:32:ef:d9:b4:e2:75:
                    29:30:da:33:5e:e7:e6:f2:94:58:99:9f:be:7f:e4:
                    be:1b:04:5c:fa:e1:c5:42:73:30:80:0a:62:ce:2c:
                    4b:65:36:8b:08:b5:38:46:78:14:8f:5f:01:ba:f2:
                    46:ec:e1:15:29:a0:ce:76:b2:2e:8b:0f:15:4c:ec:
                    7d:8b:e3:fb:b8:57:13:4e:1b:60:5b:dc:e9:54:ba:
                    51:66:db:9c:5e:18:81:d9:7f:8d:c6:4a:65:32:c5:
                    b1:c4:2b:1f:aa:8e:75:b1:83:ea:80:1f:96:76:25:
                    90:f3:2b:1c:37:f4:ed:59:1a:a1:54:2d:0d:9c:9f:
                    4b:d3:5a:f3:ad:58:6b:79:1f:a2:89:b7:45:a3:94:
                    cb:61:36:5e:f1:e9:0d:91:41:c9:04:f0:19:1a:3a:
                    af:b5:f4:b1:db:9f:65:57:4e:53:93:32:45:7b:cc:
                    1d:2d:c6:b8:12:aa:d0:e4:8c:ce:ef:02:e9:d5:80:
                    35:59:72:86:5c:07:d5:54:0a:c5:62:08:25:83:7b:
                    f2:34:84:10:c9:a4:ab:12:bd:e2:98:a9:4b:07:15:
                    cc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1E:BE:BA:0E:72:FB:38:C2:D9:BD:AC:6F:31:B3:9A:D7:6A:C6:CA
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32322d3232203d3e203632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:c6:f0:42:aa:e8:7d:78:f0:6f:72:e9:d9:ba:fc:1a:27:50:
         f3:8e:f7:7d:c6:31:dc:b4:91:4e:bb:fc:17:4a:08:9e:f5:07:
         65:85:fa:15:44:8b:22:27:aa:ce:49:15:ec:ae:21:c5:7e:95:
         cc:c5:6d:7a:32:40:54:79:92:ed:06:5d:3e:45:68:4e:e2:7b:
         28:3e:1c:25:41:43:28:99:f6:e6:76:31:0b:69:53:9c:c2:5c:
         26:7c:47:96:c2:d5:a1:48:a0:da:9a:ff:76:ba:09:d1:84:15:
         1b:dc:11:2b:57:26:6b:10:e5:93:c7:49:64:7c:5e:71:a5:6b:
         f0:b4:d4:38:59:2d:d9:7d:d8:07:01:3b:0f:59:34:c1:91:6e:
         00:f1:67:28:de:81:b9:88:2f:e9:d8:42:82:3f:b0:9f:56:27:
         4b:0a:24:d4:d6:f7:c8:ec:0c:37:7e:4d:fc:b1:b5:ca:60:02:
         a5:84:f9:f9:bc:1f:9b:6b:de:6a:a2:bc:35:e6:43:c0:b0:a2:
         e3:fe:56:1e:14:f5:5d:03:b7:d2:6f:69:20:2b:34:49:a5:2e:
         31:5c:65:ea:82:83:15:f2:56:22:a5:43:a5:d2:4a:d9:81:2a:
         88:92:f2:e3:82:dc:f0:88:bd:fd:db:6e:4b:95:b7:66:0e:c9:
         66:3f:44:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:57:21 2026 by rpki-client